Every module on this marketplace was built in our pipeline, scanned by Trivy, signed by cosign, and attested with SLSA provenance. Click any module to preview it live, read what operators say, and take away a working compose file.
Submit a Dockerfile or an image reference. Flareo runs it through the full pipeline — BuildKit, Trivy, CycloneDX SBOM, VEX annotation, SLSA L1 provenance, cosign keyless signing, policy gate, admin review — and lists the result on this marketplace if it passes. You see every stage live.